Default config for loggingBlacklist

[chillu]

Devs who read all of your instructions will come across the bit where you can opt-in to filtering out sensitive parameters from log messages. I understand the rationale behind this: Omnipay is an abstraction layer, parameter names can vary between implementations.

But: I think filtering out values for keys like token or password is a pretty universal need, and should be covered in the default configuration regardless of implementation. This way you don't run the risk of logging very sensitive data to external systems (logging services) by default.